[asterisk-users] Using Firewall to protect Asterisk

Mark Deneen mdeneen at gmail.com
Fri Jul 15 12:15:41 CDT 2011


On Fri, Jul 15, 2011 at 12:47 PM, CDR <venefax at gmail.com> wrote:
> I need to keep out all connection from 5 countries, which originate
> most of the Denial of Service attacks. The entries are
> around 9000 if used as xx.xx.0.0/16. I heard that there is a smarter
> way to do this by using User Tables in iptables, that will keep the
> speed equal to LOG(x). I already tried using  a straight list and it
> kills the box. Unless a smarter way us found, there is no way to use
> iptables.
>
> Federico
>

Are you matching on new packets/connections only or all packets?

-M



More information about the asterisk-users mailing list